Aprovall & Galink launch an offer dedicated to Procurement teams

An end-to-end managed service, directly integrated into supplier management, with no additional burden on Procurement and Security teams.

43% of attacks suffered by large groups are linked to a third party in 2025 (CESIN 2026 OpinionWay cybersecurity barometer)

Aprovall, a supplier risk management and assessment platform (TPRM), announces a strategic partnership with Galink, a specialist in supplier cyber assessment as a managed service. This collaboration allows Aprovall clients to trigger in-depth cyber assessments on their most critical suppliers — directly from their supplier management process, without mobilizing their internal teams.

A risk that has become a priority for Procurement

The explosion of attacks via suppliers, now the cause of 30% of data breaches in 2025—double the previous year—and the entry into force of DORA and NIS2 have changed the equation: this subject now demands special attention.

The Aprovall–Galink partnership responds to this need with a simple logic: Aprovall orchestrates, Galink assesses. Clients identify the suppliers to analyze; Galink takes care of the entire assessment process — questionnaire, evidence collection, document analysis, supplier reminders — and delivers a directly usable output for the teams.

An end-to-end cyber assessment, operated by experts

Unlike purely self-declarative approaches, Galink combines a structured questionnaire, evidence collection and analysis, and human review by cyber analysts. The final deliverable includes an overall scorecard, scoring by framework (NIST, ISO 27001), identified non-conformities, analyst commentary, and a remediation plan — enabling Procurement, Risk teams, and CISOs to make an informed decision: formalize contractually, accept, monitor, or escalate the risk.

Suppliers bear no cost and benefit from dedicated support throughout the process by Galink. Relying on more than 2,000+ assessments executed on Galink, the service boasts an average supplier satisfaction rate of 8.8/10 and a median lead time of 9 days from launch to deliverable, supplier follow-ups included.

Relying on more than 2,000+ assessments executed on Galink, the service boasts an average supplier satisfaction rate of 8.8/10 and a median lead time of 9 days from launch to deliverable, supplier follow-ups included.

“Supplier cyber risk is no longer a topic reserved for IT teams. Procurement needs a system that is actionable, understandable, and acceptable to their suppliers. This is exactly what this partnership brings to them.”

Emmanuel Poidevin | Founder and President of Aprovall

“Supplier cyber risk has become too critical and too technical. It requires dedicated technology to ensure our security and limit the operational burden of audits. By joining forces with Aprovall, we are providing European Procurement Departments with the entire suite necessary to scale up.”

Etienne Retout | Co-founder and CPO of Galink

Use cases covered

The system integrates into key moments of the supplier lifecycle: assessment of finalists during a call for tenders, securing a contract signature, audit campaigns on an existing supplier base, or reassessment prior to contract renewal.

Availability and pricing

Immediate availability for Aprovall customers. Per-assessment pricing, volume-based discounts apply.